diff options
| author | Eike Rathke <erack@redhat.com> | 2015-07-10 23:46:30 +0200 |
|---|---|---|
| committer | Eike Rathke <erack@redhat.com> | 2015-07-11 03:08:36 +0200 |
| commit | f52aa4d13b7f262a4c54f4e554f45d64a545bce7 (patch) | |
| tree | d6cabbed96442672dec6d65a3e9a194384fafc34 /svl/source/numbers | |
| parent | b3c11e2b3ef4bad8c2b5f92ba00ac805fb68786f (diff) | |
fix string access out of bounds
Could happen with a malformed subformat string like "[<0-0".
Change-Id: I8eaab2bcb469d91432a41dc349060c273a6575a4
Diffstat (limited to 'svl/source/numbers')
| -rw-r--r-- | svl/source/numbers/zformat.cxx | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/svl/source/numbers/zformat.cxx b/svl/source/numbers/zformat.cxx index e725d1d8944d..c6450347997e 100644 --- a/svl/source/numbers/zformat.cxx +++ b/svl/source/numbers/zformat.cxx @@ -697,7 +697,7 @@ SvNumberformat::SvNumberformat(OUString& rString, { fLimit2 = fNumber; } - if ( sBuff[nPos] == ']' ) + if ( nPos < sBuff.getLength() && sBuff[nPos] == ']' ) { nPos++; } |